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Amendments to the Specification: 

Please replace the paragraph beginning on page 1, line 5 with the following rewritten 
paragraph: 

—This application relates to commonly assigned copending U.S. Patent Appln. 
No. 09/849,093 xx/xxx,xxx , also entitled "System and Methods for Providing Dynamic 
Authorization in a Computer System/' filed on the same day as the present application, the 
entirety of which is hereby incorporated by reference.— 

Please replace the paragraph beginning on page 12, line 22 with the following rewritten 
paragraph: 

— For example, a system and methods for providing dynamic authorization in a computer system 
via standard programming objects are disclosed in commonly assigned copending U.S. Patent 
Appln. No. 09/849,093 xx/xxx,xxx , filed Month, Day, Year, hi one embodiment, the system of 
U.S. Patent Appln. No. 09/849,093 xx/xxx,xxx supplements the APIs and data structures used 
for staticly determined authorization policies. According to a typical access check procedure, an 
application registers itself for use of the dynamic group and dynamic access check routines that 
will supplement the regular access check APIs and data structures. The regular access check 
APIs and data structures are correspondingly altered to accommodate and utilize the dynamic 
functionality of the dynamic routines. Upon a request from a user or a machine, the client context 
is determined based upon static and dynamic data i.e., the client context may be computed in 
relation to dynamic factors. For instance, the groups to which the requestor belongs may be a 
dynamic factor, and may be determinative as to whether the requestor has access vis-a-vis a 
dynamic or static authorization policy. According to a routine that determines the requestor's 
group affiliation according to static factors, the client context is then updated with dynamically 
computed groups according to the dynamic group routine. If there is dynamic authorization 
policy, it can be stored in a specialized dynamic Access Control Entry (ACE) structure that has 
an identifier indicating its dynamic nature. By way of the access check APIs used for static 
ACEs, augmented by dynamic functionality, if a match is made between information contained 
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in the client context and a dynamic ACE, a dynamic access check routine tailored to the 
application is called whereby the authorization policy is determined in relation to dynamic data. 
This information is returned to supplement static access determination results and permission for 
the requested access may then be denied or granted in accordance with the results. — 
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